Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/385279A7156D16CD0E0832BCE576D91211168351.cer
File:                     385279A7156D16CD0E0832BCE576D91211168351.cer (raw, json)
Hash identifier:          atQoIiBOZs+mbDzlKr4hAfvxVw+li3OZ9LN69g6ZYXw=
Subject key identifier:   38:52:79:A7:15:6D:16:CD:0E:08:32:BC:E5:76:D9:12:11:16:83:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7B30CFD25F5E7ACC8F584DA83BDC0EE8B4724584
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/385279A7156D16CD0E0832BCE576D91211168351.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:39:50 +0000
Certificate not after:    Thu 03 Apr 2025 18:44:50 +0000
Subordinate resources:    AS: 270419
                          IP: 190.115.64.0/22
                          IP: 2804:6bb8::/32

Validation:               Failed, certificate revoked on Sun 26 May 2024 16:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:30:cf:d2:5f:5e:7a:cc:8f:58:4d:a8:3b:dc:0e:e8:b4:72:45:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:39:50 2024 GMT
            Not After : Apr  3 18:44:50 2025 GMT
        Subject: CN=385279A7156D16CD0E0832BCE576D91211168351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:4e:ec:d3:a8:83:c3:62:8b:49:5b:ba:79:
                    8e:06:67:4e:35:29:50:41:9f:9c:bf:2e:24:9b:6e:
                    fa:7e:20:bf:15:67:87:c6:96:0e:bd:6f:ff:7a:9f:
                    d8:cd:02:d3:35:ab:3a:65:54:da:06:98:cf:4a:7b:
                    c7:e7:3f:27:a3:6d:f8:39:7f:1d:2d:07:7b:bc:f9:
                    e9:17:65:f0:47:24:db:f3:d4:00:07:ad:ae:a9:12:
                    d8:69:21:ac:13:59:c8:b4:b2:60:d4:90:e8:89:ce:
                    6b:f5:06:14:82:71:8b:ec:2b:d6:59:71:37:ec:16:
                    a9:5b:a5:88:8e:b2:15:9c:fa:c5:e9:fa:2a:94:9b:
                    ad:c4:54:4e:ef:37:4e:2d:02:f3:54:7b:54:fe:5a:
                    a1:5d:4c:51:7d:c4:0d:44:ed:46:d3:98:f3:84:81:
                    51:81:68:25:af:80:25:dc:5f:aa:36:a4:d7:9e:78:
                    c1:f2:ff:e6:76:a7:2e:67:26:3e:b0:91:48:5a:1a:
                    57:ef:34:aa:b2:62:32:c5:73:44:13:92:00:d2:ed:
                    7e:2d:0e:54:fa:e8:0a:2f:3c:49:f9:af:4e:0e:31:
                    52:92:9b:81:8f:18:5a:03:c5:4a:f6:76:8e:ab:f8:
                    f3:dd:07:82:13:7d:a7:16:2a:f0:96:91:f9:5c:79:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:52:79:A7:15:6D:16:CD:0E:08:32:BC:E5:76:D9:12:11:16:83:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/385279A7156D16CD0E0832BCE576D91211168351.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.64.0/22
                IPv6:
                  2804:6bb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270419

    Signature Algorithm: sha256WithRSAEncryption
         85:ed:80:49:f9:6c:e1:7b:17:5a:a5:d9:dd:75:8a:3d:da:9b:
         4f:21:bf:b0:54:73:dd:14:77:0c:43:25:8a:71:4c:58:50:67:
         1d:64:45:2d:84:09:a5:3c:ab:95:4b:3d:29:e4:ad:37:67:f1:
         ba:51:89:c7:c3:50:31:5f:a4:34:a3:a6:9f:53:0a:2c:95:f6:
         46:2a:59:c6:d8:00:47:6c:30:fc:b3:2a:43:0d:b2:1b:bd:f4:
         f5:e7:6c:22:09:ce:0c:1d:72:cc:42:6a:a6:9e:3c:0f:cf:ca:
         5d:4e:58:17:03:33:09:be:bd:fa:86:38:12:19:e3:62:44:91:
         5a:71:51:a6:7d:e9:f3:1d:d7:e6:19:96:fe:7d:e8:98:ac:33:
         b3:f2:c8:56:96:27:e4:41:68:66:c7:05:0b:5d:a5:bc:f2:57:
         fa:03:1d:98:25:00:b3:d7:76:fd:2a:a2:0a:09:e6:21:13:8c:
         a9:70:df:f2:f5:25:ab:71:f5:d5:1e:00:61:8e:5b:d7:24:64:
         e4:6e:30:22:45:8e:0d:70:61:ab:7a:78:b8:70:9f:02:5c:3e:
         ef:3e:0e:b5:5e:65:8c:59:34:d0:bf:5a:9e:b4:b3:16:29:3a:
         83:51:da:36:2f:03:71:f7:92:4c:d7:2e:3f:15:3c:22:4f:71:
         18:d6:af:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 19:22:14 2024 by rpki-client on console-fra.rpki-client.org